VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Jan 30, 2023· Updated Jun 17, 2026

CVE-2022-2988

CVE-2022-2988

Description

A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert – HVAC (Versions prior to V1.4.0)

Affected products

6
  • Schneider Electric/Ecostruxure Machine Expert Hvac3 versions
    cpe:2.3:a:schneider-electric:ecostruxure_machine_expert_-_hvac:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:schneider-electric:ecostruxure_machine_expert_-_hvac:*:*:*:*:*:*:*:*range: <1.4.0
    • (no CPE)range: <V1.4.0
    • (no CPE)range: All
  • Schneider Electric/Somachine Hvac3 versions
    cpe:2.3:a:schneider-electric:somachine_hvac:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:schneider-electric:somachine_hvac:*:*:*:*:*:*:*:*range: <2.1.0
    • (no CPE)range: <V2.1.0
    • (no CPE)range: All

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.